CodeAstro · weakness class
File and Path Handling
16 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- likely to be exploited
- 1
Every one of the 16 is a mark on the map. Named now: 1 to 16, most at risk first.
- An Unrestricted File Upload vulnerability in CodeAstro Membership Management System in PHP v.1.0 allows a remote attacker to execute arbitrary code via upload of a crafted php fil…
- An arbitrary file upload vulnerability in add_product.php of Restaurant POS System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
- A Remote Code Execution (RCE) vulnerability exists in Code Astro Internet Banking System 2.0.0 due to improper file upload validation in the profile_pic parameter within pages_vie…
- CodeAstro POS System Profile Picture profil unrestricted upload
- CodeAstro POS System Logo setting unrestricted upload
- CodeAstro Internet Banking System Profile Picture pages_account.php unrestricted upload
- CodeAstro Membership Management System Add Members Tab unrestricted upload
- CodeAstro Membership Management System Logo unrestricted upload
- CodeAstro Online Railway Reservation System Profile Photo Update emp-profile-avatar.php unrestricted upload
- CodeAstro Hospital Management System his_doc_update-account.php unrestricted upload
- CodeAstro Restaurant POS System update_product.php unrestricted upload
- CodeAstro Real Estate Management System About Us Page aboutedit.php unrestricted upload
- CodeAstro Real Estate Management System About Us Page aboutadd.php unrestricted upload
- CodeAstro Real Estate Management System submitproperty.php unrestricted upload
- CodeAstro Real Estate Management System register.php unrestricted upload
- CodeAstro Online Job Portal update-profile.php unrestricted upload
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.